kettle-dev 3.0.0 → 3.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c7cdd1aace2e06deda5e6bb04aa3b2e6ef67408f0521c8d0ed6a8fa27fad23be
-  data.tar.gz: e23d202928cd64875dffdb94bb426e0925e2033a7b07ba36b154eba7c83175d8
+  metadata.gz: 335bd9651ff7bbe5381c8e050a26f070c6accd8054ab581226ba3355c8a4aa6e
+  data.tar.gz: 7f59238412adde48ba5f2b524b08e4ce77a5348c81d0984e44013e6ce905b2dc
 SHA512:
-  metadata.gz: a6c052d533011b2e59762247ee8cb7d8f794e2383720dc7d589beb1643e8086451f5f2922f5b6f77b3d46cebb4f657c07d290ab3c0146e99e2a9196149ce1002
-  data.tar.gz: 6a38aaf07275a14e588d8e03ab35f8c208755a78c5ac222328688fea61eafde8770bd826abedc8ae91742723dcf69ae09b97782a9eec97e75ebeb380422e6ba2
+  metadata.gz: 94e3d356b963078c8dd46d50d0f2b7ed92f656327bd3f766618617b56172ae0051dc32f6469cfd5c9faf539e00a4bbdf123947dd8febbd10c34172f51a2efc2d
+  data.tar.gz: d2eee5766a478c4846f05969ac4fcbf4614793740911c029219d85fb446fd308f9c376c5fa8d68edbdc71bd144dba09a1ad927c5915278c7933d0fc50ac74dca

data/CHANGELOG.md

@@ -30,6 +30,19 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [3.0.1] - 2026-08-10
+
+- TAG: [v3.0.1][3.0.1t]
+- COVERAGE: 91.87% -- 5602/6098 lines in 47 files
+- BRANCH COVERAGE: 76.29% -- 2117/2775 branches in 47 files
+- 50.64% documented
+
+### Fixed
+
+- Run 1Password authorization keepalives through the interactive terminal so release prompts remain visible.
+
+- Re-normalize release lockfiles after release tasks before commit and CI validation.
+
 ## [3.0.0] - 2026-08-09
 
 - TAG: [v3.0.0][3.0.0t]
@@ -3401,7 +3414,9 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.0...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.1...HEAD
+[3.0.1]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.0...v3.0.1
+[3.0.1t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.1
 [3.0.0]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.28...v3.0.0
 [3.0.0t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.0
 [2.5.28]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.27...v2.5.28

data/README.md

@@ -1007,7 +1007,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.069-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.098-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/interactive_release_command.rb

@@ -1,39 +1,54 @@
 # frozen_string_literal: true
 
 require "open3"
+require "shellwords"
 
 module Kettle
   module Dev
     class InteractiveReleaseCommand
-      def initialize(secrets_provider:, input: $stdin, output: $stdout, error: $stderr, secret_event_handler: nil)
+      def initialize(secrets_provider:, input: $stdin, output: $stdout, error: $stderr, secret_event_handler: nil, forward_stdin: false)
         @secrets_provider = secrets_provider
         @input = input
         @output = output
         @error = error
         @secret_event_handler = secret_event_handler
+        @forward_stdin = forward_stdin
         @gem_signing_passphrase = nil
       end
 
       def call(env, cmd)
-        return call_with_pty(env, cmd) if pty_available?
+        call_argv(env, Shellwords.split(cmd.to_s))
+      end
+
+      def call_argv(env, argv)
+        return call_with_pty(env, argv) if pty_available?
 
-        call_with_open3(env, cmd)
+        call_with_open3(env, argv)
       end
 
       private
 
       attr_reader :secrets_provider, :secret_event_handler
 
-      def call_with_pty(env, cmd)
+      def call_with_pty(env, argv)
         stdout_str = +""
+        prompt_buffer = +""
         status = nil
-        PTY.spawn(env, cmd) do |output, input, pid|
+        PTY.spawn(env, *argv) do |output, input, pid|
           begin
             loop do
-              chunk = output.readpartial(1024)
-              stdout_str << chunk
-              @output.print(chunk)
-              handle_prompt(input, chunk)
+              readers = [output]
+              readers << @input if @forward_stdin && @input.tty?
+              IO.select(readers).first.each do |reader|
+                if reader.equal?(@input)
+                  input.write(@input.readpartial(1024))
+                else
+                  chunk = output.readpartial(1024)
+                  stdout_str << chunk
+                  @output.print(chunk)
+                  prompt_buffer = handle_prompt(input, chunk, prompt_buffer: prompt_buffer)
+                end
+              end
             end
           rescue Errno::EIO
             # PTY raises EIO when the child process exits after closing the slave.
@@ -47,27 +62,33 @@ module Kettle
         [stdout_str, "", status]
       end
 
-      def call_with_open3(env, cmd)
+      def call_with_open3(env, argv)
         stdout_str = +""
         stderr_str = +""
+        prompt_buffer = +""
         status = nil
-        Open3.popen3(env, cmd) do |input, output, error, wait_thread|
+        Open3.popen3(env, *argv) do |input, output, error, wait_thread|
           readers = [output, error]
+          readers << @input if @forward_stdin && @input.tty?
           until readers.empty?
             ready = IO.select(readers)
             ready.first.each do |reader|
-              begin
-                chunk = reader.readpartial(1024)
-                if reader.equal?(output)
-                  stdout_str << chunk
-                  @output.print(chunk)
-                else
-                  stderr_str << chunk
-                  @error.print(chunk)
+              if reader.equal?(@input)
+                input.write(@input.readpartial(1024))
+              else
+                begin
+                  chunk = reader.readpartial(1024)
+                  if reader.equal?(output)
+                    stdout_str << chunk
+                    @output.print(chunk)
+                  else
+                    stderr_str << chunk
+                    @error.print(chunk)
+                  end
+                  prompt_buffer = handle_prompt(input, chunk, prompt_buffer: prompt_buffer)
+                rescue EOFError
+                  readers.delete(reader)
                 end
-                handle_prompt(input, chunk)
-              rescue EOFError
-                readers.delete(reader)
               end
             end
           end
@@ -76,13 +97,21 @@ module Kettle
         [stdout_str, stderr_str, status]
       end
 
-      def handle_prompt(input, chunk)
-        if otp_prompt?(chunk)
-          write_secret(input, label: "RubyGems MFA code", source: "rubygems_otp") { secrets_provider.rubygems_otp } if otp_response_prompt?(chunk)
-          return
+      def handle_prompt(input, chunk, prompt_buffer: nil)
+        prompt_buffer = prompt_buffer.to_s.dup
+        prompt_buffer << chunk.to_s
+        prompt_buffer = prompt_buffer.byteslice([prompt_buffer.bytesize - 4096, 0].max, 4096).to_s
+
+        if otp_prompt?(prompt_buffer)
+          if otp_response_prompt?(prompt_buffer)
+            write_secret(input, label: "RubyGems MFA code", source: "rubygems_otp") { secrets_provider.rubygems_otp }
+            return +""
+          end
+          return prompt_buffer
         end
 
-        write_secret(input, label: "gem signing passphrase", source: "gem_signing_passphrase") { gem_signing_passphrase } if signing_password_prompt?(chunk)
+        write_secret(input, label: "gem signing passphrase", source: "gem_signing_passphrase") { gem_signing_passphrase } if signing_password_prompt?(prompt_buffer)
+        prompt_buffer
       end
 
       def gem_signing_passphrase

data/lib/kettle/dev/release_cli.rb

@@ -622,7 +622,10 @@ module Kettle
       end
 
       def prepare_release_lockfiles_for_commit!
-        reset_release_lockfiles!(stage: "before release prep commit") unless @release_lockfiles_reset_for_release_tasks
+        # Release setup and documentation tasks can re-materialize local PATH
+        # sources in the parent development bundle after the preflight reset.
+        # Always normalize again at the commit boundary.
+        reset_release_lockfiles!(stage: "before release prep commit")
         validate_release_lockfiles!(stage: "before release prep commit")
       end
 

data/lib/kettle/dev/release_secrets.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require "open3"
+require "kettle/dev/interactive_release_command"
 require "kettle/dev/release_notifier"
 
 module Kettle
@@ -73,7 +74,7 @@ module Kettle
           argv = [op_cli, "account", "get"]
           account = string_config("account")
           argv.concat(["--account", account]) unless account.empty?
-          run_op(argv, purpose: "authorization keepalive", elapsed: elapsed)
+          run_op(argv, purpose: "authorization keepalive", elapsed: elapsed, interactive: true)
           true
         end
 
@@ -112,9 +113,11 @@ module Kettle
           required_config("cli")
         end
 
-        def run_op(argv, purpose:, elapsed: nil)
+        def run_op(argv, purpose:, elapsed: nil, interactive: false)
           elapsed_suffix = elapsed.to_s.empty? ? "" : " (elapsed #{elapsed})"
           Kettle::Dev::ReleaseNotifier.alert("1Password #{purpose} lookup starting#{elapsed_suffix}; watch for authorization prompt.")
+          return run_interactive_op(argv, purpose: purpose) if interactive
+
           stdout, stderr, status = Open3.capture3(*argv)
           return stdout.to_s.strip if status.success? && !stdout.to_s.strip.empty?
 
@@ -125,6 +128,23 @@ module Kettle
           raise Kettle::Dev::Error, "1Password CLI executable #{argv.first.inspect} was not found"
         end
 
+        def run_interactive_op(argv, purpose:)
+          _stdout, stderr, status = Kettle::Dev::InteractiveReleaseCommand.new(
+            secrets_provider: Provider.new,
+            input: $stdin,
+            output: $stdout,
+            error: $stderr,
+            forward_stdin: true
+          ).call_argv({}, argv)
+          return if status.success?
+
+          details = stderr.to_s.strip
+          details = "op exited #{status.exitstatus}" if details.empty?
+          raise Kettle::Dev::Error, "1Password #{purpose} lookup failed: #{details}"
+        rescue Errno::ENOENT
+          raise Kettle::Dev::Error, "1Password CLI executable #{argv.first.inspect} was not found"
+        end
+
         def required_config(key)
           value = string_config(key)
           raise Kettle::Dev::Error, "1Password release secrets require #{key}" if value.empty?

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "3.0.0"
+      VERSION = "3.0.1"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data.tar.gz.sig

@@ -1,4 +1,4 @@
-b"ݽ������}$`/'`���W����,�YވvC�8P���x�
-Gk��3o@�[5�1?��>Z�m_�1X�x:�	y�|C�H.B�j�3���E��Y���xj�c��呙@4@���6����
-���.���ne��D� r�׽��؞Ŕ��x�P����s�
J�o���=��l��>������LC� :a@���0m<�/��$�y͔����	��)��T�
�Y~��";�Ւ���,�zZ�����0��x������$�����o�Oυ��tU���I��5�RMK��	�Q}>�[�<�%D��7`���&{�IZtNs�CJ*1�z@&�,�2�~o�8�ɍ
-�e$6���Ľ
f'�\
+S+|I"{w��Vtnhl4eL;�c��X�F׏wH�(Y�2C�1[���{��[���!����C�䄮N�\��;��^DZ)_��q�[��mSP8��di�U�Z�^GG6F|�M������]�]%,��T�I*�@��"xЂ<�dV��k��Ngv�H'l�闞�Q�F��ə?ȬU
0z(�O@
+�R�E+��q�s�U�[���?�c5ɰ1N-
+-��A���i#;'�k�f���5�h�B���-��� ��<���rp���������xj<g�X�+W��4dt4l�����b�X�Y	��\��m�"b%N�z{	��grY�	�]�`��1�n�z�p$+��
+�T�\���B��L!;��Z��<a��]J�y�M�k���j�

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 3.0.0
+  version: 3.0.1
 platform: ruby
 authors:
 - Peter H. Boling
@@ -400,10 +400,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.0.0
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.0.0/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.0.1
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.0.1/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.0.0
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.0.1
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev